CVE-2026-18742 | UX-themes Flatsome Plugin up to 3.20.12 on WordPress Custom HTML Block data-text-sec/data-title/title HTML injection

A vulnerability categorized as problematic has been discovered in UX-themes Flatsome Plugin up to 3.20.12 on WordPress. This impacts an unknown function of the component Custom HTML Block. The manipulation of the argument data-text-sec/data-title/title results in HTML injection.

This vulnerability is cataloged as CVE-2026-18742. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More